Эх, сисадмин...
Приходится спрашивтаь у всемирного разума, так как всемирная мусорка ответа не дает.
Есть точка cisco Aironet AR
cisco AIR-AP1242G-E-K9 (PowerPCElvis) processor (revision A0) with 24566K/8192K bytes of memory.
Processor board ID FCZxxxxxxxx
PowerPCElvis CPU at 262Mhz, revision number 0x0950
Last reset from reload
1 FastEthernet interface
1 802.11 Radio(s)
32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: D0:D0:FD:xx:xx:xx
Part Number : 73-11479-01
PCA Assembly Number : 800-30493-01
PCA Revision Number : A0
PCB Serial Number : FOC
Top Assembly Part Number : 800-29586-03
Top Assembly Serial Number : FCZxxxxxxxx
Top Revision Number : A0
Product/Model Number : AIR-AP1242G-E-K9
Прошивка обновленная последняя. Клиенты подключены к ней карточками D-Link Wireless G DWA-510 Desktop Adapter. Так вот в чем фигня:
*Mar 1 16:19:49.396: %DOT11-4-MAXRETRIES: Packet to client 001c.xxxx.xxxx reached max retries, removing the client
*Mar 1 16:19:49.396: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 001c.xxxx.xxxx Reason: Previous authentication no longer valid
*Mar 1 16:19:49.402: %DOT11-4-MAXRETRIES: Packet to client 001c.xxxx.xxxx reached max retries, removing the client
*Mar 1 16:20:03.114: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 001c.xxxx.xxxx Associated KEY_MGMT[WPA PSK]
И такое происходит каждые 30-40 секунд. Пинги естественно пропадают.
Аутентификация по паролю. WPA_PSK.
При этом на ту же точку если подключить ноут, то он работает нормально и не пересоединяется. Но это один. Другой ноут вообще не может подключиться. Для специалистов - конфига под катом
Current configuration : 2501 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname wifi-xxxxxxxxxxx
!
enable secret 5 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
!
aaa new-model
!
!
aaa authentication login default local
!
aaa session-id common
ip domain name xxxxxxxxxxxx
!
!
dot11 activity-timeout unknown default 1800
dot11 activity-timeout client default 1800
dot11 activity-timeout repeater default 1800
dot11 activity-timeout workgroup-bridge default 1800
dot11 activity-timeout bridge default 1800
!
dot11 ssid xxxxxx
vlan 1
authentication open
authentication key-management wpa
guest-mode
wpa-psk ascii 7 xxxxxxxxxxxxxxxxxx
!
dot11 ssid yyyyyyyy
vlan 37
authentication open
authentication key-management wpa
wpa-psk ascii 7 yyyyyyyyyyyyyyyyyyyyyyyyyyyy
!
power inline negotiation prestandard source
!
!
username xxxxxxxx password 7 yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption vlan 1 mode ciphers aes-ccm tkip
!
encryption mode ciphers aes-ccm tkip
!
encryption vlan 37 mode ciphers aes-ccm tkip
!
ssid xxxxxx
!
ssid xxxxxxxx
!
packet retries 128
station-role root access-point
no dot11 extension aironet
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio0.37
encapsulation dot1Q 37
no ip route-cache
bridge-group 37
bridge-group 37 block-unknown-source
no bridge-group 37 source-learning
no bridge-group 37 unicast-flooding
bridge-group 37 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
hold-queue 160 in
!
interface FastEthernet0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface FastEthernet0.37
encapsulation dot1Q 37
no ip route-cache
bridge-group 37
no bridge-group 37 source-learning
bridge-group 37 spanning-disabled
!
interface BVI1
ip address 192.168.xx.xx 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.xx.xx
no ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
!
end
Вопрос- что делать? Поиск на официальных форумах ничего не дал - там советуют отключить aironet extentions. Отключил - хрен там. Больше никаких толковых советов поддержка не дает.
Есть точка cisco Aironet AR
cisco AIR-AP1242G-E-K9 (PowerPCElvis) processor (revision A0) with 24566K/8192K bytes of memory.
Processor board ID FCZxxxxxxxx
PowerPCElvis CPU at 262Mhz, revision number 0x0950
Last reset from reload
1 FastEthernet interface
1 802.11 Radio(s)
32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: D0:D0:FD:xx:xx:xx
Part Number : 73-11479-01
PCA Assembly Number : 800-30493-01
PCA Revision Number : A0
PCB Serial Number : FOC
Top Assembly Part Number : 800-29586-03
Top Assembly Serial Number : FCZxxxxxxxx
Top Revision Number : A0
Product/Model Number : AIR-AP1242G-E-K9
Прошивка обновленная последняя. Клиенты подключены к ней карточками D-Link Wireless G DWA-510 Desktop Adapter. Так вот в чем фигня:
*Mar 1 16:19:49.396: %DOT11-4-MAXRETRIES: Packet to client 001c.xxxx.xxxx reached max retries, removing the client
*Mar 1 16:19:49.396: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 001c.xxxx.xxxx Reason: Previous authentication no longer valid
*Mar 1 16:19:49.402: %DOT11-4-MAXRETRIES: Packet to client 001c.xxxx.xxxx reached max retries, removing the client
*Mar 1 16:20:03.114: %DOT11-6-ASSOC: Interface Dot11Radio0, Station 001c.xxxx.xxxx Associated KEY_MGMT[WPA PSK]
И такое происходит каждые 30-40 секунд. Пинги естественно пропадают.
Аутентификация по паролю. WPA_PSK.
При этом на ту же точку если подключить ноут, то он работает нормально и не пересоединяется. Но это один. Другой ноут вообще не может подключиться. Для специалистов - конфига под катом
Current configuration : 2501 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname wifi-xxxxxxxxxxx
!
enable secret 5 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
!
aaa new-model
!
!
aaa authentication login default local
!
aaa session-id common
ip domain name xxxxxxxxxxxx
!
!
dot11 activity-timeout unknown default 1800
dot11 activity-timeout client default 1800
dot11 activity-timeout repeater default 1800
dot11 activity-timeout workgroup-bridge default 1800
dot11 activity-timeout bridge default 1800
!
dot11 ssid xxxxxx
vlan 1
authentication open
authentication key-management wpa
guest-mode
wpa-psk ascii 7 xxxxxxxxxxxxxxxxxx
!
dot11 ssid yyyyyyyy
vlan 37
authentication open
authentication key-management wpa
wpa-psk ascii 7 yyyyyyyyyyyyyyyyyyyyyyyyyyyy
!
power inline negotiation prestandard source
!
!
username xxxxxxxx password 7 yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption vlan 1 mode ciphers aes-ccm tkip
!
encryption mode ciphers aes-ccm tkip
!
encryption vlan 37 mode ciphers aes-ccm tkip
!
ssid xxxxxx
!
ssid xxxxxxxx
!
packet retries 128
station-role root access-point
no dot11 extension aironet
!
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio0.37
encapsulation dot1Q 37
no ip route-cache
bridge-group 37
bridge-group 37 block-unknown-source
no bridge-group 37 source-learning
no bridge-group 37 unicast-flooding
bridge-group 37 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
hold-queue 160 in
!
interface FastEthernet0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface FastEthernet0.37
encapsulation dot1Q 37
no ip route-cache
bridge-group 37
no bridge-group 37 source-learning
bridge-group 37 spanning-disabled
!
interface BVI1
ip address 192.168.xx.xx 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.xx.xx
no ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
!
end
Вопрос- что делать? Поиск на официальных форумах ничего не дал - там советуют отключить aironet extentions. Отключил - хрен там. Больше никаких толковых советов поддержка не дает.